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LIST OF CURRENT CLAIMS 

L (Previously Presented) A method for effecting a secure electronic transaction on a 
terminal using a portable data carrier arranged to perform different quality user authentication 
methods, wherein the portable data carrier performs a user authentication using one of said 
different user authentication methods, the portable data carrier confirms the proof of 
authentication to the terminal, and the portable data carrier then performs a security- 
establishing operation within the electronic transaction, comprising the steps of creating 
authentication quality information by the portable data carrier about said user authentication 
method used and attaching said authentication quality information to the result of the 
security-establishing operation, wherein the difference in quality of user authentication varies 
between an inherently relatively lower quality and an inherently relatively higher quality 
from a security perspective. 

2. (Previously Presented) The method according to claim 1, wherein the security- 
establishing operation performed by the portable data carrier comprises creating a digital 
signature, 

3. (Previously Presented) The method according to claim 1, wherein the 
authentication of the user is performed by presentation of a biometric feature. 

4. (Previously Presented) The method according to claim 3, wherein the 
authentication of the user is performed by presentation of a physiological or behavior-based 
feature characteristic of a user, 

5. (Previously Presented) The method according to claim 1, wherein the 
authentication of the user is performed by proof of knowledge of a secret. 

6. (Previously Presented) The method according to claim 1, wherein at least two 
different authentication methods of different quality are offered for authentication of the user. 

7. (Previously Presented) The method according to claim 6, wherein the particular 
authentication methods not used are disabled. 
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8. (Previously Presented) The method according to claim 6, wherein no quality 
information is produced for an authentication method. 

9. (Previously Presented) The method according to claim 1, wherein a user is asked to 
select an authentication method. 

10. (Currently Amended) A portable data carrier for performing a security- 
establishing operation within a secure electronic transaction and arranged to perform different 
quality user authentication methods, wherein the difference in quality of user authentication 
varies between an inherently relatively lower quality and an inherently relatively higher 
quality from a security perspective, comprising: whereby the portable data carrier is arranged 
to perform a user authentication using one of said implemented user authentication methods 
and the portable data carrier is arranged to confirm the authentication to a terminal, and 
wherein the data carrier is arranged to create quality information about said user 
authentication method used and to attach such quality information to the result of the security 
establishing operation. 

1 1 . (Previously Presented) The data carrier according to claim 10, wherein the 
portable data carrier is set up to create a digital signature. 

12. (Previously Presented) The data carrier according to claim 10, wherein the data 
carrier supports at least two qualitatively different authentication methods. 

13. (Currently Amended) A terminal for use in connection with the portable data 
carrier according to claim [[9]] 10, said terminal including a device arranged to cause a user 
to select one of at least two possible different quality authentication methods. 

14. (Previously Presented) A system for effecting a secure electronic transaction 
within which the quality of authentication of a user of the system is ascertained, comprising 
the portable data carrier according to claim 10 and the terminal according to claim 13. 
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